Business Continuity Calculator
Score a business continuity programme on plan coverage, exercising, achievable recovery against the MTPD, alternate capacity and supplier contingency.
Inputs
Continuity Programme Score
54.1%
Plan Coverage
79.2%
Exercise Coverage
50.0%
Recovery Gap Against the MTPD
12.0hours
Critical Processes Not Exercised
12processes
Programme Maturity
Level 2 — documented but unproven
Recovery Verdict
Demonstrated recovery is 12 hour(s) beyond the maximum tolerable period of disruption, so the plan does not meet its own requirement
Next Action
Close the recovery gap first — an RTO the organisation cannot demonstrate is the single largest continuity exposure
Step by step
Values used
Critical business processes = 24 processes; Processes with a current documented plan = 19 processes; Processes exercised in the last 12 months = 12 processes; Shortest maximum tolerable period of disruption = 24 hours; Recovery time you can actually demonstrate = 36 hours; Alternate site or region capacity = 60 %; Key roles with a trained deputy = 45 %; Critical suppliers with a contingency arrangement = 50 %; Most demanding exercise completed = Functional or simulation exercise — 75
Business Continuity
Programme score = 0.25 × recovery capability + 0.20 × plan coverage + 0.20 × exercise coverage + 0.12 × alternate capacity + 0.10 × supplier contingency + 0.08 × cross-training + 0.05 × exercise depth.
Continuity Programme Score
= 54.1
Plan Coverage
= 79.2
Exercise Coverage
= 50.0
Recovery Gap Against the MTPD
= 12.0 hours
Critical Processes Not Exercised
= 12 processes
Programme Maturity
= Level 2 — documented but unproven
How it works
Recovery capability carries the largest weight and is measured against the MTPD rather than against the RTO in the policy, because the tolerable period is a business constraint while the objective is an aspiration. Exercise coverage is weighted equally with plan coverage on the simple grounds that an unexercised plan has never been shown to work, and cross-training appears because continuity plans routinely name one person who is on holiday. Continuity programmes look healthy on a plan count and fail on the two things nobody measures: whether recovery has ever been demonstrated, and whether anyone other than the author can execute the plan. These are management estimates for programme steering, not an ISO 22301 audit result.
Formula
Business Continuity
Programme score = 0.25 × recovery capability + 0.20 × plan coverage + 0.20 × exercise coverage + 0.12 × alternate capacity + 0.10 × supplier contingency + 0.08 × cross-training + 0.05 × exercise depth.
- recovery capability
- Demonstrated recovery time compared with the MTPD: 100 at half the MTPD, 75 inside it, 35 up to twice it, 0 beyond
- plan coverage
- Processes with a current plan ÷ critical processes
- exercise coverage
- Processes exercised in 12 months ÷ critical processes
Frequently Asked Questions
How is Business Continuity calculated?
Programme score = 0.25 × recovery capability + 0.20 × plan coverage + 0.20 × exercise coverage + 0.12 × alternate capacity + 0.10 × supplier contingency + 0.08 × cross-training + 0.05 × exercise depth. Recovery capability carries the largest weight and is measured against the MTPD rather than against the RTO in the policy, because the tolerable period is a business constraint while the objective is an aspiration. Exercise coverage is weighted equally with plan coverage on the simple grounds that an unexercised plan has never been shown to work, and cross-training appears because continuity plans routinely name one person who is on holiday.
Why does Business Continuity matter?
Continuity programmes look healthy on a plan count and fail on the two things nobody measures: whether recovery has ever been demonstrated, and whether anyone other than the author can execute the plan. These are management estimates for programme steering, not an ISO 22301 audit result.
What values do I need to enter?
This calculator takes 9 inputs: Critical business processes, Processes with a current documented plan, Processes exercised in the last 12 months, Shortest maximum tolerable period of disruption, Recovery time you can actually demonstrate, Alternate site or region capacity, Key roles with a trained deputy, Critical suppliers with a contingency arrangement, Most demanding exercise completed. The pre-filled defaults are a realistic starting point — replace them with figures from your own environment for a result you can act on.
Why measure against the MTPD rather than the RTO?
Because the RTO is a target you chose and the MTPD is a limit the business imposes. If demonstrated recovery beats the RTO but breaches the MTPD, the RTO was set wrong; if it beats the MTPD but misses the RTO, you have a tuning problem rather than a survival problem.
Is a tabletop exercise good enough?
It is far better than nothing and it is where most gaps in decision-making and communication surface cheaply. What it cannot tell you is whether the technical recovery works, which is why exercise depth is scored separately and a live failover scores highest.
You might also need
- Disaster Recovery RTO CalculatorCommonly used together
- Business Impact Analysis CalculatorCommonly used together
- Third-Party Risk CalculatorCommonly used together
- Cyber Resilience CalculatorCommonly used together
- Vendor Risk CalculatorCommonly used together
- Disaster Recovery RPO CalculatorCommonly used together